WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sourceafrica
Published
2015-09-01
Title
sourceAFRICA <= 0.1.3 - Unauthenticated Cross-Site Scripting (XSS)
Slug
sourceplay-navermap
Published
2025-03-24
Title
sourceplay-navermap <= 0.0.2 - Missing Authorization
Slug
south-pole-the-offset-movement
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
south-pole-the-offset-movement
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sovratec-case-management
Published
2024-10-17
Title
Sovratec Case Management <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
sp-announcement
Published
2024-07-10
Title
WP Announcement < 2.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
sp-blog-designer
Published
2024-11-20
Title
SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Slug
sp-blog-designer
Published
2025-03-31
Title
SP Blog Designer <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
sp-client-document-manager
Published
2014-12-02
Title
SP Client Document Manager < 2.4.4 - Multiple SQL Injection
Slug
sp-client-document-manager
Published
2015-03-31
Title
SP Project & Document Manager <= 2.5.3 - Blind SQL Injection
Slug
sp-client-document-manager
Published
2015-03-31
Title
SP Project Document Manager <= 2.5.3 - Blind SQL Injection
Slug
sp-client-document-manager
Published
2016-03-07
Title
SP Projects & Document Manager < 2.6.0.0 - Multiple Vulnerabilities
Slug
sp-client-document-manager
Published
2021-05-25
Title
SP Project & Document Manager < 4.22 - Authenticated Shell Upload
Slug
sp-client-document-manager
Published
2021-08-16
Title
SP Project & Document Manager < 4.26 - Reflected Cross-Site Scripting
Slug
sp-client-document-manager
Published
2021-06-28
Title
SP Project & Document Manager < 4.24 - Subscriber+ Shell Upload
Slug
sp-client-document-manager
Published
2022-06-28
Title
SP Project & Document Manager < 4.58 - Sensitive File Disclosure
Slug
sp-client-document-manager
Published
2022-08-10
Title
SP Project & Document Manager < 4.62 - Reflected Cross-Site Scripting
Slug
sp-client-document-manager
Published
2023-06-29
Title
SP Project & Document Manager < 4.68 - Subscriber+ Insecure Direct Object References
Slug
sp-client-document-manager
Published
2023-06-30
Title
SP Project & Document Manager < 4.68 - Admin+ Stored XSS
Slug
sp-client-document-manager
Published
2023-06-30
Title
SP Project & Document Manager < 4.68 - Subscriber+ SQLi
Slug
sp-client-document-manager
Published
2024-02-02
Title
SP Project & Document Manager < 4.70 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
sp-client-document-manager
Published
2024-03-29
Title
SP Project & Document Manager <= 4.70 - Missing Authorization Stored Cross-Site Scripting
Slug
sp-client-document-manager
Published
2024-04-24
Title
SP Project & Document Manager <= 4.71 - Subscriber+ File Download via IDOR
Slug
sp-client-document-manager
Published
2024-04-24
Title
SP Project & Document Manager <= 4.71 - Data Update via IDOR
Slug
sp-client-document-manager
Published
2024-04-16
Title
SP Project & Document Manager <= 4.71 - Authenticated (Author+) SQL Injeciton